Tag: web application

CISA reports on healthcare risk and vulnerability assessment, offers cybersecurity recommendations

CISA reports on healthcare risk and vulnerability assessment, offers cybersecurity recommendations

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released on Friday a report on the findings of a risk and vulnerability assessment conducted for a healthcare and public health (HPH) sector organization. The report outlines the activities and key findings…

Tenable adds comprehensive web application, API scanning capabilities to its Nessus Expert

Tenable adds comprehensive web application, API scanning capabilities to its Nessus Expert

Exposure management company Tenable announced Wednesday web application and API scanning in Tenable Nessus Expert. These features provide simple and comprehensive vulnerability scanning for modern web applications and APIs. Nessus Expert is a vulnerability assessment solution that spans traditional IT…

Claroty’s Team82 develops generic bypass of WAF, calls for review of JSON support across organizations

Claroty’s Team82 develops generic bypass of WAF, calls for review of JSON support across organizations

Claroty’s Team82 researchers announced Thursday the development of a generic bypass of web application firewalls (WAF). Attackers using this technique would be able to bypass the WAF’s protection and use additional vulnerabilities to exfiltrate data. The bypass was found to…

RCE vulnerability

Annke N48PBB NVR contains RCE vulnerability exposing IoT security camera systems

Nozomi Networks Labs has identified the presence of a critical RCE vulnerability related to the web service of the Annke N48PBB NVR (network video recorder). Used in the critical infrastructure sector, the manipulation of the vulnerability may cause a stack-based…